MiniBrowser Modified Version Version: 1.0.0.127 Based on Chromium: 87.0.4280.66 Original file download link: https://browser-download.kfsafe.cn/MiniBrowserSetup.exe Programs used: - 7zip ---> https://www.7-zip.org - HxD Hex Editor ---> https://mh-nexus.de/en/hxd/ - TCPLogView ---> https://www.nirsoft.net/utils/tcp_log_view.html - LiveTcpUdpWatch ---> https://www.nirsoft.net/utils/live_tcp_udp_watch.html - Wireshark ---> https://www.wireshark.org/ - DNSQuerySniffer ---> https://www.nirsoft.net/utils/dns_query_sniffer.html Removed Files: In MiniBrowserSetup - "$PLUGINSDIR" (folder) - "$TEMP" (folder) - "help.exe" - "Uninstall.dll" - "uninstall.exe" In MiniBrowserSetup/bin - "default_extensions" (folder) - "MEIPreload" (folder) - "updata" (folder) - "mojo_core.dll" - "chrome_elf.dll" - "eventlog_provider.dll" - "notification_helper.exe" Modified Files: In MiniBrowserSetup a) "MiniBrowser.exe" Replaced every "kfsafe.cn" and "minichrome." unicode entries by dots. In MiniBrowserSetup/bin a) "chrome.dll" - Offset (h) = 6AA6FEE Replaced "https://newtab.se.kfsafe.cn/?tid=" by "chrome://newtab/" - Offset (h) = 65BEBC0 Replaced the first "9999" entry by " " (homepage modification) - Offset (h) = 6DC21D2 Replaced the "07 52 62 63 30 52 49 00 45 00 21 6A 0F 5F" hex code by "55 00 73 00 65 00 20 00 49 00 45 00 20 00" (IE kernel switch button on right click menu translation) - Offset (h) = 6F29388 Replaced the "07 52 62 63 30 52 49 00 45 00 35 00 21 6A 0F 5F" hex code by "49 00 45 00 35 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 36 00 21 6A 0F 5F" hex code by "49 00 45 00 36 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 37 00 21 6A 0F 5F" hex code by "49 00 45 00 37 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 38 00 21 6A 0F 5F" hex code by "49 00 45 00 38 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 39 00 21 6A 0F 5F" hex code by "49 00 45 00 39 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 31 00 30 00 21 6A 0F 5F" hex code by "49 00 45 00 31 00 30 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 30 52 49 00 45 00 31 00 31 00 21 6A 0F 5F" hex code by "49 00 45 00 31 00 31 00 20 00 20 00 20 00 20 00 20 00" Replaced the "07 52 62 63 DE 56 81 67 1F 90 21 6A 0F 5F" hex code by "4E 00 65 00 77 00 20 00 54 00 61 00 62 00" (Other translations of IE kernel related buttons) - Replaced every "kfsafe.cn" unicode and editor entries by dots. - Replaced every "minichrome" unicode entries by dots. - Replaced every "gstatic", "googleapis", "accounts.google.com", "redirector.gvt1.com" and "224.0.0.251" editor entries by dots.